(ARTICLES 13 AND 14 EU 2016/679)
For the purposes laid down in EU Regulation 2016/679 on protection of natural persons in relation to personal data processing, we inform you that the data provided by you and acquired by ANNAMARIA CAMMILLI SRL will be processed in compliance with the Regulation and the resulting rights and obligations.
Data controller is ANNAMARIA CAMMILLI SRL with registered office in Bagno a Ripoli (FI), Via del Fornaccio, 46, Italy - email address: [email protected] in the person of its pro tempore legal representative tax code and VAT id. no.02004840480.
The full list of data supervisors can be requested to the Data Processor using the contact details listed above.
a. Categories of data processed
The following categories of personal data concerning you may be collected through various services and communication channels described in this Policy:
Contact details - information concerning name, address, telephone number, mobile number, email address.
Other personal data - information provided by you on your date of birth, education or professional status, tax code, bank details, credit card number.
b. Purposes of processing
The data collected will be used for the following purposes:
- Fulfill the administrative, financial and accounting obligations resulting from any outstanding or concluding legal relationship with ANNAMARIA CAMMILLI and its associated ancillary activities.
- Provide customer service, including warranty and after-sales service and related ancillary activities.
- Defining the terms of payment and ancillary related activities.
- Fulfill all legal obligations and comply with Regulations and Community/International legislations.
- Verify and assess the level of customer satisfaction.
- Inform you about ANNAMARIA CAMMILLI SRL news and activities by means of our newsletter.
- Inform you about special offers regarding products or services provided by ANNAMARIA CAMMILLI SRL by means of online and offline tools (customized offers).
- Process your data to conclude online selling operations exclusively through the e-shop of the following website: annamariacammilli.com and according to the terms of sales available at the dedicated e-shop section of the website.
The provision of data for the purposes mentioned in paragraph 1, 2 and 3, in connection with a pre-contractual and/or contractual stage, i.e. functional to a customer request or required by a specific legal provision, is mandatory. In the absence of the aforementioned data, it will not be possible to receive information and to access the requested services.
The processing of data for the above-mentioned purposes is in compliance with Article 6, paragraph 1, point a (consent), point b (implementing of pre-contractual and contractual obligations), point c (fulfill legal obligation), point f (legitimate interest), Reg.EU 2016/679.
c. How we process your personal data
Your data will be processed in full compliance with the lawfulness, fairness and transparency principle. The processing will be carried out with automated and computerized tools, but we may also use paper archives to store, manage and forward personal data. The processing will take place by means of appropriate tools, suitable to guarantee the safety and confidentiality of the data by means of reasonable procedures avoiding the risk of loss, unauthorized access, misuse and disclosure. Data processing is carried out by the Data Controller and by those who have been expressly authorized by the Controller.
d. Data provision and refusal
The provision of personal data is mandatory in relation to the abovementioned point B paragraph 1, 2, 3, 4. Refusal to provide these data will lead to partial or non-performance of service.
e. Scope and purposes of communication and disclosure
Your data may be shared with ANNAMARIA CAMMILLI SRL’s authorized individuals who act as Data Processor and who are appointed and delegated by the Data Controller. For the abovementioned purposes, the Data Controller may communicate your personal data in Italy and abroad to third parties who provide us services upon request, and who are therefore related to ANNAMARIA CAMMILLI SRL. Third parties will be only given those data that are necessary to provide the requested services, and all the necessary measures will be taken to protect your personal data. The data may be transferred outside the European Economic Area if this is necessary for the management of your contractual relationship. In that case, the recipients of the data will assume obligations of protection and security equivalent to those guaranteed by the Data Controller. In any case, we will communicate only the data that are necessary for the aforementioned purposes; where required, the guarantees related to the transfer of data to third countries will apply. We may also disclose personal data to our suppliers of commercial services; to that end, they will be appointed as external data processors. Data may also be communicated to competent public entities and authorities to fulfill legal obligations or ascertain responsibilities in case of computer crimes damaging our website, including those communicated or allocated to third parties (as data supervisors or in case of IT services providers, as autonomous data controllers), those who offer IT services (e.g hosting services, website managers and developers) and who are employed by the Data Controller to carry out technical and organizational tasks necessary for the websites. Subjects belonging to the abovementioned categories operate as separate Data Controllers or as Data Responsible directly appointed by the Data Controller.
The categories of recipients to whom data may be communicated is available by contacting ANNAMARIA CAMMILLI SRL to the abovementioned contact details.
f. Transfer of personal data to foreign countries (extra EU)
Within the scope of its contractual relationships, ANNAMARIA CAMMILLI SRL may transfer the Data you provided to countries located outside the European Economic Area (EEA) and store them in databases administrated by subjects acting on its behalf. Databases’ management and data processing are performed according to the purposes of data processing and in compliance with the applicable legal provisions on data protection. ANNAMARIA CAMMILLI SRL shall ensure that any data transfer to no-EU countries complies with applicable legal provisions, and that it will enter into any agreements necessary in order to guarantee suitable safeguards and/or adopt the European Commission-recommended standard contractual clauses.
g. Data storage
We only store personal data for as long as it is necessary to fulfill the purposes for which we collect the data or to comply with any legal requirements (e.g to defend ourselves from claims made against us, or whenever there is a legitimate interest). In case the consent is withdrawn, data may be stored to manage any possible objection and/or dispute.
h. Rights of the data subject
We remind you that you can anytime exercise the rights provided for by EU Regulation 2016/679. You have the right to receive free and clear information concerning the personal data that are being processed or stored. In addition, you have also the following rights:
Right of access: the right to know which data have been collected and how they are processed;
Right of rectification: the right to ask for modification of your personal data in case they are no longer up to date;
Right to erasure: you have the right to ask for erasure of your personal data;
Right to restriction of processing: you have the right to obtain the restriction of the processing of your personal data;
Right to data portability: the right to ask for information you have made available to us to be transferred in machine-readable formats;
Right to object: the right to object against processing of your personal data;
Right to withdraw your consent to personal data processing at any moment, without prejudice to the legality of the data processing carried out prior to the withdrawal;
Right to file a complaint with the supervisory authority.
To exercise these rights you can contact us via PEC at the following e-mail address: [email protected]
According to Article 8 of EU Regulation 2016/679, the consent may be given only by individuals aged 16 or over. In case of individuals under the age of 16, data processing is legitimate only if the consent is given by the holder of parental responsibility.